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Abstract. We propose a new theoretical model for passively mobile Wireless Sensor Networks. We 
call it the PALOMA model, standing for PAssively mobile LOgarithmic space MAchines. The main 
modification w.r.t. the Population Protocol model [2] is that agents now, instead of being automata, are 
Turing Machines whose memory is logarithmic in the population size n. Note that the new model is still 
easily implementable with current technology. We focus on complete commumcation graphs. We define 
the complexity class PLM, consisting of all symmetric predicates on input assignments that are stably 
computable by the PALOMA model. We assume that the agents are initially identical. Surprisingly, it 
turns out that the PALOMA model can assign unique consecutive ids to the agents and inform them 
of the population size] This allows us to give a direct simulation of a Deterministic Turing Machine 
of 0{n\ogn) space, thus, establishing that any symmetric predicate in SPACE{nlogn) also belongs 
to PLM. We next prove that the PALOMA model can simulate the Community Protocol model [15], 
thus, improving the previous lower bound to all symmetric predicates in NSPACE{nlogn). Going 
one step further, we generalize the simulation of the deterministic TM to prove that the PALOMA 
model can simulate a Nondetermtnistic TM of C'(nlogn) space. Although providing the same lower 
bound, the important remark here is that the bound is now obtained in a direct manner, in the sense 
that it does not depend on the simulation of a TM by a Pointer Machine. Finally, by showing that a 
Nondeterministic TM of C(n log n) space decides any language stably computable by the PALOMA 
model, we end up with an exact characterization for PLM: it is precisely the class of all symmetric 
predicates in N SPAC E{n\ogn). 



1 Introduction 

Theoretical models for Wireless Sensor Networks have received great attention over the past few 
years. Recently, Angluin et al. [2] proposed the Population Protocol {PP) model. Their aim was 
to model sensor networks consisting of tiny computational devices with sensing capabilities that 
follow some unpredictable and uncontrollable mobility pattern. Due to the minimalistic nature of 
their model, the class of computable predicates was proven to be fairly small: it is the class of 
semilinear predicates, thus, not including multiplication of variables, exponentiations, and many 
other important operations on input variables. Moreover, Delporte-Gallet et al. [14] showed that 
PPs can tolerate only 0{1) crash failures and not even a single Byzantine agent. 

The work of Angluin et al. shed light and opened the way towards a brand new and very 
promising direction. The lack of control over the interaction pattern, as well as its inherent non- 
determinism, gave rise to a variety of new theoretical models for WSNs. Those models draw most 
of their beauty precisely from their inability to organize interactions in a convenient and predeter- 
mined way. In fact, the Population Protocol model was the minimalistic starting-point of this area 
of research. Most efforts are now towards strengthening the model of Angluin et al. with extra real- 
istic and implementable assumptions, in order to gain more computational power and/or speed-up 
the time to convergence and/or improve fault-tolerance. 



* This work has been partially supported by the ICT Programme of the European Union under contract number 
ICT-2008-215270 (FRONTS). 
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The Mediated Population Protocol (MPP) model of [11] was based on the assumption that the 
agents can read and write pairwise information on some global storage, like e.g. a base station. Each 
ordered pair of agents that is permitted to interact occupies a memory slot of fixed length. The 
MPP model is strictly stronger than the PP model, since it can handle multiplication of variables, 
and MP, which is the class of symmetric predicates stably computable by MPP, is contained in 
NSPACE{m), where m denotes the number of edges of the communication graph. Unfortunately, 
as partly indicated by [10] and [12], our knowledge of this model is quite restricted yet. 

Guerraoui and Ruppert [15] made another natural assumption: they equipped the agents with 
read-only unique identifiers picked from an infinite set of ids. They named their model the Com- 
munity Protocol model. Each agent has its own unique id and can store up to a constant number of 
other agents' ids. In this model, agents are only allowed to compare ids, that is, no other operation 
on ids is permitted. It was proven that the corresponding class consists of all symmetric predicates 
in NSPACE{n\ogn), where n is the community size. The proof was based on a simulation of a 
modified version of Nondcterministic Schonhage's Storage Modification Machine (NSMM). It was 
additionally shown that if faults cannot alter the unique ids and if some necessary preconditions 
are satisfied, then community protocols can tolerate 0(1) Byzantine agents. 

In this work, we think of each agent as being a Turing Machine whose memory is logarithmic 
in the population size. Based on this realistic and implementable assumption, we propose a new 
theoretical model for passively mobile sensor networks, called the PALOMA model. To be more 
precise, it is a model of PAssively mobile MAchines (that we keep calling agents) with sensing 
capabilities, equipped with two-way communication, and each having a memory of size LOgarithmic 
in the population size n. The reason for studying such an extension is that having logarithmic 
communicating machines seems to be more natural than communicating automata of constant 
memory. First of all, the communicating machines assumption is perfectly consistent with current 
technology (cellphones, iPods, PDAs, and so on). Moreover, logarithmic is, in fact, extremely small. 
For a convincing example, it suffices to mention that for a population consisting of 2^^® agents, 
which is a number greater than the number of atoms in the observable universe, we only require each 
agent to have 266 cells of memory (while small-sized flash memory cards nowadays exceed 16GB 
of storage capacity)! Interestingly, as we shall see, it turns out that the agents are able to organize 
themselves into a distributed nondcterministic TM that makes full use of the agents' memories! 
The TM draws its nondeterminism by the nondeterminism inherent in the interaction pattern. 

1.1 Other Previous Work 

Much work concerning the Population Protocol model has been devoted to establishing that the 
class of computable predicates is precisely the class of semilinear predicates [2,4]. Moreover, in 
[2], the Probabilistic Population Protocol model was proposed, in which the scheduler selects ran- 
domly and uniformly the next pair to interact. Some recent work has concentrated on performance, 
supported by this random scheduling assumption (see e.g. [3]). [9] proposed a generic definition 
of probabilistic schedulers and a collection of new fair schedulers, and revealed the need for the 
protocols to adapt when natural modifications of the mobility pattern occur. [8, 13] considered a 
huge population hypothesis (population going to infinity), and studied the dynamics, stability and 
computational power of probabilistic population protocols by exploiting the tools of continuous 
nonlinear dynamics. Moreover, several extensions of the basic model have been proposed in order 
to more accurately reflect the requirements of practical systems. In [1], Angluin et al. studied what 
properties of restricted communication graphs are stably computable, gave protocols for some of 
them, and proposed an extension of the model with stabilizing inputs. In [10], MPP's ability to de- 
cide graph properties was studied and it was proven that connectivity is undecidable. Unfortunately, 
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the class of decidable graph languages by MPP remains open. Some other works incorporated agent 
failures [14] and gave to some agents slightly increased computational power [6] (heterogeneous sys- 
tems). Recently, Bournez et al. [7] investigated the possibility of studying population protocols via 
game-theoretic approaches. For an excellent introduction to the subject of population protocols see 
[5] and for some recent advances mainly concerning mediated population protocols see [12]. 

2 Our Results - Roadmap 

In Section 3, we begin with a formal definition of the PALOMA model. The section proceeds with 

a thorough description of the systems' functionality and then provides definitions of configurations 
and fair executions. In Section 4, stable computation of symmetric predicates on input assignments 
is defined. Then the complexity classes SSPACE{f{n)), SNSPACE{f{n)) (symmetric predicates 
in SPACE{f{n)) and NSPACE{f{n)), respectively), and PLM (stably computable predicates 
by the PALOMA model) are defined, and the section concludes with two examples of stably com- 
putable predicates (Subsection 4.1). Both those predicates are non-semilinear, establishing that the 
PALOMA model is computationally stronger than the population protocol model. We next study 
more systematically the computational power of the new model, seeking for an exact characteriza- 
tion for the class PLM. We first study the PPALOMA model, a generalization of the PALOMA 
model that additionally knows the population size n (see Section 5). Then, in Section 6 we focus on 
another generalization of the PALOMA model, called the IPALOMA model, in which the agents 
not only know the population size but additionally have already been assigned the unique consec- 
utive ids {0, 1, . . . , n — 1}. We define the corresponding class of stably computable predicates that 
we call IPLM. We begin by studying the relationship between IPLM and PLM. Unexpectedly, 
it turns out that PLM = IPLM (Theorem 3)! The reason is that the PALOMA model can inform 
the agents of the population size and assign unique consecutive ids to the agents via an iterative 
reinitiation process. We next prove that SSPACE(n\ogn) is a subset of IPLM, by showing that in 
the IPALOMA model the agents can easily organize themselves into a deterministic Turing Machine 
of O(nlogn) space. Thus, the inclusions SSPACE{nlogn) C IPLM = PLM provide us with a 
first lower bound for PLM. In Section 7, PLM's lower bound is improved to SN SPACE{n\ogn). 
In particular, it is proven that the PALOMA model simulates Guerraoui's and Ruppert's Com- 
munity Protocol model [15]. Unfortunately, the proof of the lower bound on the computational 
power of the Community Protocol model in [15] entirely depends on the simulation of a TM by a 
Storage Modification Machine, and this dependence is carried to our result. In order to avoid this, 
in Subsection 7.2 we go one step further and, by exploiting the techniques of Theorem 3 (Section 
6), we show that the PALOMA model can directly simulate a nondcterministic TM of O(nlogn) 
space. Moreover, in Section 8 we show that SN SP AC E{n\ogn) is an exact characterization for 
PLM, by proving that the corresponding language of any predicate that is stably computable by 
the PALOMA model can be decided by a nondcterministic TM of O(nlogn) space. To summarize, 
the main result of this work is that PLM is equal to SN SPACE{n\ogn). Finally, in Section 9 we 
conclude and discuss some future research directions. 

3 The Model 

In this section, we formally define the PALOMA model and describe its functionality. In what 
follows, we denote by G = (U, E) the (directed) communication graph: V is the set of agents, or 
population, and E is the set of permissible ordered pairwise interactions between these agents. We 
provide definitions for general commTinication graphs, although in this work wc deal with complete 
communication graphs only. We generally denote by n the population size (i.e. n= \ V\). 
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Definition 1. A PALOMA protocol A is a 7-tuple {S, X, r,Q,d,j,qo) where E, X, F and Q are 

all finite sets and 

1. U is the input alphabet, where ^,\J^ E, 

2. X C i7* is the set of input strings, 

3. r is the tape alphabet, where #, U G -T and E d F, 
4- Q is the set of states, 

5. 5:QxF^Qxrx {L, R} x {0, 1} is the internal transition function, 

6. 'j: QxQ^QxQis the external transition function ( or interaction transition function ), and 

7. qo ^ Q is the initial state. 

Each agent is equipped with the following: 

— A sensor in order to sense its environment and receive a piece of the input (which is an input 
string from X). 

— A tape (memory) consisting of ©(logn) cells. The tape is partitioned into three parts each 
consisting of C>(logn) cells: the leftmost part is the working tape, the middle part is the output 
tape, and the rightmost part is the message tape (wc call the parts "tapes" because such a 
partition is equivalent to a 3-tape machine) . The last cell of each part contains permanently the 
symbol # (we assume that the machine never alters it); it is the symbol used to separate the 
three tapes and to mark the end of the overall tape. 

— A control unit that contains the state of the agent and applies the transition functions. 

— A head that reads from and writes to the cells and can move one step at a time, either to the 
left or to the right. 

— A binary working flag either set to 1 meaning that the agent is working internally or to 
meaning that the agent is ready for interaction. 

Initially, all agents are in state qo and all their cells contain the blank symbol U except for the 
last cell of the working, output, and message tapes that contain the separator ^. We assume that 
all agents concurrently receive their sensed input (different agents may sense different data) as a 
response to a global start signal. The input is a string from X and after reception (or, alternatively, 
during reception, in an online fashion) it is written symbol by symbol on their working tape begin- 
ning from the leftmost cell. During this process the working flag is set to 1 and remains to 1 when 
this process ends (the agent may set it to in future steps). 

When its working flag is set to 1 we can think of the agent working as a usual Turing Machine 
(but it additionally writes the working flag). In particular, whenever the working flag is set to 1 
the internal transition function 5 is applied, the control unit reads the symbol under the head and 
its own state and updates its state and the symbol under the head, moves the head one step to the 
left or to the right and sets the working flag to or 1, according to the internal transition function. 

We assume that the set of states Q and the tape alphabet F, are both sets whose size is fixed 
and independent of the population size (i.e. \Q\ = \F\ = 0(1)), thus, there is, clearly, enough room 
in the memory of an agent to store both the internal and the external transition functions. 

As it is common in the population protocol literature, a fair adversary scheduler selects ordered 
pairs of agents (edges from E) to interact. Assume now that two agents u and v arc about to 
interact with u being the initiator of the interaction and v being the responder. Let f : V ^ {0, 1} 
be a function returning the current value of each agent's working flag. If at least one of f{u) and 
f{v) is equal to 1, then nothing happens, because at least one agent is still working internally. 
Otherwise (/(u) = f{v) = 0), both agents are ready and an interaction is established. In the latter 
case, the external transition function 7 is applied, the states of the agents arc updated accordingly, 
the message of the initiator is copied to the message tape of the responder (replacing its contents) 
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and vice versa (the real mechanism would require that each receives the other's message and then 
copies it to its memory, because instant replacement would make them lose their own message, 
but this can be easily implemented with O(logra) extra cells of memory, so it is not an issue), and 
finally the working flags of both agents are again set to 1. 

Note that the assumption that the internal transition function 5 is only applied when the 
working flag is set to 1 is weak. In fact, an equivalent way to model this is to assume that 6 is of 
the form 6 : Q x F x {0,1} ^ Q x F x {L,R,S} x {0, 1}, that it is always applied, and that for 
all g G Q and a e F, S{q, a, 0) = {q, a, S, 0) is satisfied, where S means that the head "stays put" . 
The same holds for the assumptions that 7 is not applied if at least one of the interacting agents is 
working internally and that the working flags are set to 1 when some established interaction comes 
to an end; it is equivalent to an extended 7 of the form 7 : x {0, 1}^ x {0, 1}^, that is 

applied in every interaction, and for which 7(^1, ^2, /i, /2) = {qi,Q2, fi, f2) if /i = 1 or /2 = 1, and 
i{qi,Q2, /i, /2) = (7i(Q'i, ^2), 72('?i, Q'2), 1, 1) if /i = /2 = 0, hold for all gi, 52 G Q, and we could also 
have further extended 7 to handle the exchange of messages, but for sake of simplicity we have 
decided to leave such details out of the model. 

Since each agent is a TM (of logarithmic memory), we use the notion of a configuration to 
capture its "state" . An agent configuration is a quadruple (q, I, r, /), where q Q, l,r € J^CiO^g") = 
{s € F* \ \s\ = 0{logn)}, and / € {0, 1}. q is the state of the control unit, I is the string to the left 
of the head (including the symbol scanned), r is the string to the right of the head, and / is the 
working flag indicating whether the agent is ready to interact (/ = 0) or carrying out some internal 
computation (/ = 1). Let B be the set of all agent configurations. Given two agent configurations 
A, A' € B, we say that A yields A' if A' follows A by a single application of 5. 

A population configuration is a mapping C : V B, specifying the agent configuration of each 
agent in the population. Let C, C be population configurations and let u eV. We say that C yields 
C via agent transition u, denoted C A C, if C(u) yields C'{u) and C'{w) = C{w), G F — {u}. 

Let q{A) denote the state of an agent configuration A, 1{A) its string to the left of the head 
including the symbol under the head, r{A) its string to the right of the head, and f{A) its work- 
ing flag. Given two population configurations C and C", we say that C yields C via encounter 
e = {u, v) e E, denoted C A C, if one of the following two cases holds: 

Case 1: 

— f{C{u)) = f{C{v)) = which guarantees that both agents u and v are ready for interaction 
under the population configuration C. 

— r{C{u)) and r{C{v)) are precisely the message strings of u and v, respectively (this is a sim- 
plifying assumption stating that when an agent is ready to interact its head is over the last # 

symbol, just before the message tape), 

— C'{u) = {j,{q{C{u)),q{C{v))),l{C{u)),r{C{v)),l), 

— C'iv) = i^2iq{Ciu)),q{Civ))),l{Civ)),r{C{u)),l), and 

— C'{w) = C{w), Vu; e F - {u, v}. 

Case 2: 

— f{C(u)) = 1 or f{C{v)) = 1, which means that at least one agent between u and v is working 
internally under the population configuration C, and 

— C'{w) = C{w), \/w G V. In this case no effective interaction takes place, thus the population 
configuration remains the same. 

Generally, we say that C yields (or can go in one step to) C, and write (7 — t- C, if C A C 
for some e G E (via encounter) or C A C" for some u (via agent transition), or both. We say 
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that C is reachable from C, and write C A C if there is a sequence of population configurations 
C = Co, Ci, . . . , C( = C such that Cj — t- Cj+i holds for all i G {0, 1, . . . , t — 1}. An execution is a 
finite or infinite sequence of population configurations Co, Ci . . . , so that Cj Cj+i. An infinite 
execution is fair if for all population configurations C, C such that C ^ C, if C appears infinitely 
often then so does C'. A computation is an infinite fair execution. 

Note that the PALOMA model preserves uniformity, because X , F and Q arc all finite sets 
whose cardinality is independent of the population size. Thus, protocol descriptions have also no 
dependence on the population size. Moreover, PALOMA protocols are anonymous, since initially 
all agents are identical and have no unique identifiers. 

4 Stably Computable Predicates 

The predicates that we consider here are of the following form. The input to each agent is simply 

some string s E X. An input assignment x is a mapping from V to X assigning an input string 
to each agent of the population. Let X = X^ = X^ be the set of all input assignments. Any 
mapping j3 : — )• {0, 1} is a predicate on input assignments. A predicate on input assignments p 
is called symmetric if for every x = {si, S2, ■ ■ ■ , Sn) ^ and any x' which is a permutation of x's 
components, it holds that p{x) = p{x') (in words, permuting the input strings does not affect the 
predicate's outcome). A population configuration C is called output stable if for every configuration 
C that is reachable from C it holds that 0{C'{u)) = 0{C{u)) for all u E V, where 0(C(n)) denotes 
the contents of the output tape of agent u under configuration C (i.e. a string). In simple words, no 
agent changes its output in any subsequent step and no matter how the computation proceeds. A 
predicate on input assignments p is said to be stably computable by a PALOMA protocol A if, for 
any input assignment x, any computation of A contains an output stable configuration in which 
all agents have p{x) written on their output tape. 

We say that a predicate on input assignments p belongs to SPACE{f{n)) [N SPACE{f{n))) 
if there exists some deterministic (nondeterministic, resp.) TM that gets a; G A' as input (e.g. as a 
n- vector of input strings), if p[x) = 1 accepts and if p{x) = rejects by using 0{f{n)) space. 

Remark 1. All agents are identical and do not initially have unique ids, thus, stably computable 
predicates by the PALOMA model on complete communication graphs have to be symmetric. 

Definition 2. Let SSPACE{f{n)) and SN SPACE{f{n)) be SPACE{f{n)) 's and NSPACE{ 
f{n)) 's restrictions to symmetric predicates, respectively. 

Definition 3. Let PLM denote the class of all symmetric predicates that are stably computable by 
the PALOMA model. 

Our main result in this paper is the following exact characterization for PLM: PLM is equal to 
SNSPACE{n\ogn). 

4.1 Two Examples 

We show here that there exist PALOMA protocols that stably compute the predicates {Nc = Na-Ni,) 
{Nq denotes the number of agents with input q) and (A'^i = 2*), where t G ^>o- 

Multiplication of Variables 



We begin by presenting a PALOMA protocol that stably computes the predicate {Nc = Na • N^) 
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(on the complete communication graph of n nodes) that is, all agents eventually decide whether 
the number of cs in the input assignment is the product of the number of as and the number of 6s. 
We give a high-level description of the protocol. 

Initially, all agents have one of a, 6 and c written on the first cell of their working memory 
(according to their sensed value). That is, the set of input strings is X = U = {a, b, c}. Each agent 
that receives input a goes to state a and becomes ready for interaction (sets its working flag to 
0). Agents in state a and b both do nothing when interacting with agents in state a and agents in 
state b. An agent in c initially creates in its working memory three binary counters, the a-counter 
that counts the number of as, the 6-counter, and the c-counter, initializes the a and b counters 
to 0, the c-countcr to 1, and becomes ready. When an agent in state a interacts with an agent 
in state c, a becomes a to indicate that the agent is now sleeping, and c does the following (in 
fact, we assume that c goes to a special state Ca in which it knows that it has seen an a, and that 
all the following are done internally, after the interaction; finally the agent restores its state to c 
and becomes again ready for interaction): it increases its a-countcr by one (in binary), multiplies 
its a and b counters, which can be done in binary in logarithmic space (binary multiplication is 
in LOGSPACE), compares the result with the c-counter, copies the result of the comparison to 
its output tape, that is, 1 if they are equal and otherwise, and finally it copies the comparison 
result and its three counters to the message tape and becomes ready for interaction. Similar things 
happen when a b meets a c (interchange the roles of a and b in the above discussion). When a 
c meets a c, the responder becomes c and copies to its output tape the output bit contained in 
the initiator's message. The initiator remains to c, adds the a-counter contained in the responder's 
message to its a-counter, the b and c counters of the message to its b and c counters, respectively, 
multiplies again the updated a and b counters, compares the result to its updated c counter, stores 
the comparison result to its output and message tapes, copies its counters to its message tape and 
becomes ready again. When a a, 6 or c meets a c they only copy to their outpTit tape the output 
bit contained in c's message and become ready again (eg a remains a), while c does nothing. 

Note that the number of cs is at most n which means that the c-counter will become at most 
[log n] bits long, and the same holds for the a and b counters, so there is enough room in the tape 
of an agent to store them. 

Theorem 1. The above PALOMA protocol stably computes the predicate {Nc = Na ■ N^,). 

Proof. Given a fair execution, eventually only one agent in state c will remain, its a-counter will 
contain the total number of as, its 6-counter the total number of 6s, and its c-counter the total 

number of cs. By executing the multiplication of the a and 6 counters and comparing the result to 
its c-counter it will correctly determine whether [Nc = Na ■ A^b) holds and it will store the correct 
result (0 or 1) to its output and message tapes. At that point all other agents will be in one of the 
states a, 6, and c. All these, again due to fairness, will eventually meet the unique agent in state 

c and copy its correct output bit (which they will find in the message they get from c) to their 
output tapes. Thus, eventually all agents will output the correct value of the predicate. □ 

Corollary 1. The PALOMA model is strictly stronger than the population protocol model. 

Proof. PALOMA simulates PP and stably computes {Nc = Na ■ Nj,) which is non-semilinear. □ 

Power of 2 

We now present a PALOMA protocol that stably computes the predicate (A^i = 2*), where t G ^>o, 
on the complete communication graph of n nodes, that is, all agents eventually decide whether the 
number of Is in the input assignment is a power of 2. 
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The set of input strings is X = U = {0,1}. All agents that receive 1 create a binary 1-counter 
to their working tape and initialize it to 1. Moreover, they create a binary next_pow_of2 block 
and set it to 2. Finally, they write 1 (which is interpreted as "true") to their output tape, and 
copy the 1-counter and the output bit to their message tape before going to state 1 and becoming 
ready. Agents that receive input write (which is interpreted as "false") to their output tape, 
go to state 0, and become ready. Agents in state do nothing when interacting with each other. 
When an agent in state interacts with an agent in state 1, then simply copies the output bit of 
1. When two agents in state 1 interact, then the following happen: the initiator sets its 1-counter 
to the sum of the responder's 1-counter and its own 1-counter and compares its updated value to 
nextjpow_of2. If it is less than next_pow_of2 then it writes to the output tape. If it is equal 
to nextjpow-of2 it sets next-pow-of2 to 2 • nextjpowjof2 and sets its output bit (in the output 
tape) to 1. If it is greater than next_pow-of2, then it starts doubling nextjpoW-of2 until 1-counter 
> nextjpow-of2 is satisfied. If it is satisfied by equahty, then it doubles nextjpow-of2 one more 
time and writes 1 to the output tape. Otherwise, it simply writes to the output tape. Another 
implementation would be to additionally send next-pow-of2 blocks via messages and make the 
initiator set nextjpow-of2 to the maximum of its own and the responder's nextjpow-of2 blocks. In 
this case at most one doubling would be required. Finally, in both implementations, the initiator 
copies the output bit and the 1-counter to its message tape (in the second implementation it would 
also copy next-pow-of2 to the message tape), remains in state 1, and becomes ready. The responder 
simply goes to state 1 and becomes ready. An agent in state 1 does nothing when interacting with 
an agent in state and vice versa. When an agent in state 1 interacts with an agent in state 1, 
then 1 simply copies the output bit of 1. 

Note that nextjpowjof2 can become at most 2 times the number of Is in the input assignment, 
and the latter is at most n. Thus, it requires at most [log 2n] bits of memory. Either way, we can 
delay the multiplication until another 1 appears, in which case we need at most [logn] bits of 
memory for storing nextjpow-of2 (the last unnecessary multiplication will never be done). 

4.2 Computation Under Other Input Conventions 

The multiplicative integer input convention assumes that upon initialization, each agent receives a 
value and a mark. An integer is retrieved by calculating the product x\-X2 ■ ■ - XnOi the xi values 
stored at different agents marked as x. Under this assumption, there is a simple way to compute 
the predicate = Na ■ N^. Because the input convention matches the predicate operator, it is 
equivalent to compute the predicate Na = instead. 

Upon initialization each agents is marked as either a or 6 and is assigned a value {valuca or 
valucb). Moreover, each agent maintains a flag variable indicating the correctness of the predicate. 
Initially, flag = _L for each agent. 

Interactions between agents have the following effects: 

\a,b} Then valuca = vaiuea — ^ valucb = '""■^'^^^ — ^. If after this update valucn = 

^- ' J " gca(valuea,valuei,) " gca[valuea,valuet) " 

valuch = 1 then flaga = flagi, = T. Otherwise, flaga = flagb = -L 
{a, a}, {b, b} If either flag is set to _L then both flags are set to _L. 

Lemma 1. Na = Nh iff for each configuration C there exist ai, bj such that gcd{valueai,valuebj) 7^ 
1 or ai = bj = V^i,j 

Proof. — >■ Assume on the contrary that there is no such pair and that there exists a bi 7^ 0. Then, 
Vj, aj, bi are coprimes. There is a theorem stating that if a. hi are coprimes and 0,62 are 
coprimes, then a, bi ■ ^2 are coprimes. Applying this theorem inductively we can prove that Na 
and bi are coprimes. Then A^^ is a multiple of bi, while Na is not, thus Na and A^^ can't be equal. 
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<— If there exist Cj, bj such that gcd{valueai,valuei,^) / 1 or Oj = bj = lVi,j, then we have 
successfully divided Na , Ni, with the same divisor X = Y[\/i j gcd{valueai , valueb- ) until Oj = 
bj = lVi,j. The new integers represented by the diffused Is are = Nf, = 1, and since 
N!^ = ^,we conclude that Na = Nf,. 

□ 

Lemma 2. Na = N^ iff eventually for each agent i, valuei = 1 
Proof. 

— >■ If iVa = Nb, then by the previous lemma gcd{valueai , valuchj) / 1 or = bj = lVi,j. In the 
second case there is nothing to prove. In the first case, observe that each time gcd{valueai , value}, . ) ^ 
1 a division takes place that will cut its operands at least in half. In discrete context, this sequence 
of divisions must end when Oj = bj = Vii,j. 

■<— If for each agent i, valuei = 1 then we have successfully divided iVa, N}, with the same divisor 
X = Y\-^- J gcd{valueai , value^j) until Oj = bj = lVi,j. The new integers represented by the diffused 
Is are N'^ = N^ = 1, and since N^ = ^,we conclude that Na = Nf,. □ 

Lemma 3. If Na = Ni,, eventually each agent i will set flagi to T 

Proof. If Na = Ni) then by the previous lemma each agent i will have valuei = 1. In that case, the 
gcd between two values will always be 1, thus interactions between as and bs will only generate 
T values. Due to fairness, during the execution a sequence of interactions will occur in which any 
{a, a} or {6, 6} interaction that would generate _L values can be delayed so that the participant i 
will first interact with an agent —i. This interaction will force valuci to T thus when the {i,i} 
interaction eventually takes place no ± values arc present so no _L values are generated. □ 

Lemma 4. // Na ^ N},, eventually each agent i will set flagi to _L 

Proof. By a previous lemma we know that if Na 7^ Nj, then there exists an agent bi that its value will 
get permanent and different from 1. Due to fairness, at some point all Oi agents will consecutively 
interact with 6j and set their flags to ±. Then it is easy to observe that in any interaction that will 
follow, no T value will be assigned to any flag. □ 

This protocol is quite inefficient as convergence is guaranteed only when a specific sequence of 
n interactions takes place. We can probably optimize it but that would make it more complex. 
Finally, notice the absence of memory assumptions. Indeed, the interactions are so straightforward 
that this protocol is applicable even to the PP model. 

5 Knowing the Population Size 

We prove now that if the agents know the population size n then any symmetric predicate in 
SPACE{n\ogn) is stably computable by the PALOMA model when the communication graph is 
directed and complete. 

Lemma 5. // a PALOMA protocol knows the population size n then it can assign to the agents 
the unique ids 0, 1,... ,n — 1 and, moreover, all agents will eventually know that the process has 

terminated. 

Proof. Note that n can be stored with [logn] bits, thus we assume w.l.o.g. that it is already stored 
in some block of the agents' working memories (e.g. we can assume that E = {0, 1} and X = {fe(n)}. 
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where b{n) denotes the binary string representation of n, thus all agents get b(n) as their input). 
All agents initialize an id to in their working memory, copy it to their message memory, remain to 
state qo, and become ready. When two agents interact, the external transition function alters their 
states in order to inform the initiator that it was the initiator and the responder that it was the 
responder (e.g. the rule {qo,qo) — )• (^1,^2) suffices). After the interaction, the initiator compares its 
id to the received id (that of the responder), and if they are equal it increases its own id by one. 
If its updated id is less than n — 1, it copies it in the message tape, goes to qo again and becomes 
ready. If it is equal to n — 1 it goes to g/ and becomes ready, qf is then eventually propagated 
to the whole population because ^{qf,-) = {qf,qf) and 7(-,g/) = {qf,qf) holds, and all agents 
are informed that the process has been competed successfully. The responder simply restores its 
message tape to contain again only its own id (if we assume that its own message is not lost then 
this step is not necessary, but both ways are equivalent) goes again to qo and becomes ready. 

We claim that the above process is correct. Each agent's id can only be incremented. Moreover, 
an id that has appeared in the population can never be completely eliminated (it is only incremented 
when sure that it also exists in another agent). As long as id n— 1 has not appeared, by the pigeonhole 
principle, there will be at least two agents with the same id. Thus, eventually (in a finite number 
of steps), two such agents will interact and one of them will increase its counter by one. Clearly, 
the above process must end in a finite number of steps with an agent having id n — 1. When this 
happens, the agents are assigned the unique ids 0, 1, . . . , n — 1. If not, then at least one id i < n — 1 
is missing from the population. But i should have appeared because then n — 1 could not have been 
reached. But this is a contradiction, because once an id appears then it can never be completely 
eliminated. □ 

Definition 4. Let PPALOMA ('P' standing for "Population size") be the extension of PALOMA 
in which each agent knows the population size (it can read it from a read-only block of its memory). 

Definition 5. Let PPLM denote the class of all symmetric predicates that are stably computable 
by some PPALOMA protocol. 

Theorem 2. SSPACE{n\ogn) is a subset of PPLM. 

Proof. Let p : X ^ {0)1} be any predicate in SSPACE{nlogn) and Ai be the deterministic 
TM that decides p by using O(nlogn) space. We construct a PPALOMA protocol A that stably 
computes p by exploiting its knowledge of the population size. Let x be any input assignment in 
X. Each agent receives its input string according to x (e.g. u receives string x{u)). Now the agents 
obtain unique ids according to the protocol presented in the proof of Lemma 5. The agent that has 
obtained the unique id n — 1 starts simulating Ai . 

If at some point the transition function of M. moves the head to the right, but the agent's 
working memory has no other symbol to read (e.g. it reads U), then it writes n — 2 and A^'s current 
state to its message tape and becomes ready. When the unique agent with id n — 2 interacts with an 
agent that has n — 2 in its message tape, it starts simulating Ai by putting the head over the first 
symbol in its working tape and assuming that the state of A4 is the state that it found written on 
the message it received. Generally, whenever an agent with id i > cannot continue simulating A4 
to the right it passes control to the agent with id i — 1. Additionally, if an agent with id j < n — 1 
that simulates Ai ever reaches its leftmost cell and the transition function of Ai wants to move 
the head left, then it informs agent with id j + 1 to continue the simulation (when they, eventually, 
interact) . 

Note now, that at some point Ai may want to use its (initially) blank cells to write symbols. 
This is handled by A in the following manner. A first starts using the blank cells of the agent with 
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id 0. If more arc needed, it goes to agent n — 1, writes a separator to the first blank cell (naturally 
we can assume that the separator is already there from ^'s initialization step, because also Ai uses 
separators, like ','s, between the different inputs of the symmetric predicate) and starts using those 
blank cells. Then it can use those ofn — 2,n— 1,... and so on until the last blank cell of agent with 
id 1. In fact, in this approach the distributed memory of Ai can be read by beginning from agent 
n — 1 and reading all blocks (the parts of the working memories that are used for the simulation) 
before the separators until agent 1. Then we read the whole simulation block of agent 0, proceed 
with the simulation block after the separator of agent n — 1 and continue with those blocks (after 
the separator) of all agents until agent with id 1. Thus, the memory is read in a cyclic fashion. 

Another approach would be, to initially transfer (shift) the concatenation of all agents inputs 

(separated by some symbol, e.g. ',') to agents 0, 1,2, Now, the first k agents will contain input 

data, agent with id A; — 1 will probably also have some blank cells and the remaining agents will 
contain only blank cells. In this case, simulation starts from agent and Al's tape can be read 
sequentially from agent to agent n — 1 . 

Whenever, during the simulation, Ai accepts, then A also accepts; that is, the agent that detects 
M^s acceptance, writes 1 to its output tape and informs all agents to accept. If M. rejects, it also 
rejects. Finally, note that A simulates Ai not necessarily on input x = (si, S2, . . . , Sn) but on some 
x' which is a permutation of x. The crucial remark that completes the proof is that Ai accepts x 
if and only if it accepts x', because p is symmetric. □ 

6 Assigning Unique IDs by Reinitiating Computation 

In this section, we first prove that PALOMA protocols can assume the existence of unique con- 
secutive ids and knowledge of the population size. In particular, in Theorem 3 we prove that any 
PALOMA protocol that assumes the existence of unique consecutive ids and knows the population 
size, can be composed with a PALOMA protocol that correctly assigns these unique ids to the 
agents and informs them of the correct population size, without assuming any initial knowledge of 
none of them. We then exploit this result to obtain a first lower bound for PLM. 

Definition 6. Let IPALOMA (T standing for "Ids") he the extension of PALOMA in which the 
agents have additionally the read-only unique ids {0, 1, . . . , n — 1} and in which each agent knows 
the population size (it can read it from a read-only block of its memory). 

Definition 7. Let IPLM denote the class of all symmetric predicates that are stably computable 
by the IPALOMA model. 

Theorem 3. PLM = IPLM. 

Intuitive Proof Argument. To simplify reading the formal proof that follows, we first give an intuitive 
description. The hard part is IPLM C PLM. The idea is to show that there exists a PALOMA 
protocol I that assigns unique consecutive ids and informs all agents of the correct population size, 
although initially all agents have the same id and know the same, wrong, population size, which 
are both equal to zero. Then any IPALOMA protocol A, running as a subroutine, can use those 
data provided by X in order to be correctly executed. 

I operates as follows. Whenever two agents with the same id interact, one of them increases its 
id by one and the other keeps its id. Moreover, they now both think that the correct population size 
is equal to the updated id plus one. By using some arguments similar to those in Lemma 5, it is not 
so hard to show that this process correctly assigns the unique ids {0, 1, . . . , n — 1} (in a finite number 
of steps, and due to fairness). In fact, it always first assigns the ids {0, 1, . . . , ri — 3, n — 2, n — 2} 
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and the last interaction that modifies some id will always be between some agents u and v that 
both have the id n — 2. These now obtain the ids n — 1 and n — 2, respectively, and are the only 
agents that know the correct population size. 

Of course, I cannot detect termination of the id-assignment process, because, otherwise, it is 
easy to show that it would wrongly detect termination in some component with t < n agents 
that does not interact with the rest population for a long period of time (it would be possible 
that the ids {0,1, . . . ,t — 1} would have been assigned in this component and then those agents 
would have committed an erroneous termination). To overcome this fact, we do not wait for some 
termination criterion to be satisfied before executing A- I allows A to be executed even while the 
ids are still totaly wrong. The trick is that, whenever some id is incremented, I knows that A was 
running up to this point without unique ids, and with a wrong population size. By exploiting this 
knowledge, we make I at this point reinitialize all agents (restores the input and erases all data 
produced by A, without altering the ids) and inform them of the new population size with the 
hope that now the id-assignment process has come to an end. Note that the reinitialization process 
will be executed n(n — l)/2 times, until the ids stabilize, because this is the number of times that 
some id is incremented. But when the last id-modification takes place, all agents have the correct 
unique consecutive ids and two agents u, v know the correct population size. Thus, if I does the 
above correctly, the population size will be now propagated to all agents and all of them will start 
executing A from the beginning. Since A now reads the correct ids and the correct population size, 
it will run correctly, like if the id-assignment process had never taken place, and although it was 
several times running in a wrong manner. We will also have to guarantee that I does not allow 
reinitialized agents to have some effective interaction (subroutine A gets executed) with agents that 
have not yet been reinitialized, because, otherwise, possibly outdated data of A would get mixed 
with those of the restored correct execution. Finally, we always execute A for a constant number of 
steps, because in previous wrong rounds it is possible that confiict of inconsistent data takes place 
(e.g. two agents have consecutive ids but have obtained them in different components), and this 
could make some machine fall into some infinite loop, and, thus, stop interacting (always busy). □ 

Proof. PLM C IPLM holds trivially (IPALOMA is PALOMA with extra capabilities), so it suffices 
to show that IPLM C PLM. The rest of the proof is structured in four technical lemmata, which 
follow, each with its own proof. We do this for sake of clarity and readability. Pick any p € IPLM. 
Let A be the IPALOMA protocol that stably computes it. We present a PALOMA protocol B 
that stably computes p. B consists of a procedure X containing protocol ^ as a subroutine (see 
Protocol 1). X is always executed and its job is to assign unique ids to the agents, to inform them 
of the correct population size and to control ^'s execution (e.g. restarts its execution if needed). 
A, when I allows its execution and for as many steps as it allows, simply reads the unique ids and 
the population size provided by X and executes itself normally. We first describe X's functionality 
and then prove that it eventually correctly assigns unique ids and correctly informs the agents of 
the population size, and that when this process comes to a successful end, it restarts ^'s execution 
in all agents without allowing non-reinitialized agents to communicate with the reinitialized ones. 
Thus, at some point, A will begin its execution reading the correct unique ids and the correct 
population size (provided by X), thus, it will get correctly executed and will stably compute p. 

We begin by describing X's variables, id is the variable storing the id of the agent (from which 
A reads the agents' ids), sid the variable storing the id that an agent writes in the message tape in 
order to send it, and rid the variable storing the id that an agent receives via interaction. In order to 
simplify code we make a convention. We assume that all variables used for sending information, like 
sid, preserve their value in future interactions unless altered by the agent. Initially, id = sid = 
for all agents. All agents have an input backup variable binput which they initially set to their 
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input string and make it read-only. Thus, each agent has always available its input via binput even 
if the computation has proceeded, working represents the block of the working tape that A uses 
for its computation and output represents the contents of the output tape, initiator is a binary 
flag that after every interaction becomes true if the agent was the initiator of the interaction and 
false otherwise (this is easily implemented by exploiting the external transition function), ps is the 
variable storing the population size, sp.s the one used to put it in a message, and rps the received 
one. Initially, ps = sps = 0. search-f or contains the id that the agent is searching for to interact 
with, and ssearch-for, rsearch_for are defined similarly as before. search_for and ssearch_for 
are initially equal to —1 which means not searching; the value —2 is interpreted as waiting. 



Protocol 1 I 



1: if rid —= id then / / two agents with the same ids interact 

2: if initiator == 1 then / / the initiator 

3: id -4— id + 1, sid id / / increases its id by one and writes it in the message tape 

4: search-for 0, ssearch-for // will start searching for id to reset it 

5: ps <— id + 1, sps ^ ps / / sets the population size equal to its updated id plus 1 

6: else // the responder 

7: search-for i 2, ssearch-for i 2 // starts waiting 

8: ps <— id + 2, sps <— ps 

9: end if 

10: // both clear their working block and copy their input string into it 

11: // they also clear their output tape 

12: working •<— binput, output •<— 

13: // two agents whose ids differ by one interact 

14: else if rid == id — 1 or {id == and rid > ps — 1) then 

15: / / the one with the greatest id 

16: if rsearch_for —— id then // the other was searching for it 

17: working binput, output -f- 

18: if search-for == —2 and rps == ps then 

19: search_for < 1, ssearch.for < 1 // stops waiting 

20: execute A for c = 0(1) steps ignoring the received data 

21: else if rps > ps then 

22: search-far ■<— id + 1, ssearch-for id + 1 

23: ps rps, sps ■<— ps 

24: end if 

25: else if search.for == —1 and rsearch-for == —1 then 
26: execute .4. for c = 0{1) steps 

27: end if 

28: else if rid == id + 1 or (rid == and id == ps — 1) then 

29: / / the one with the smallest id 

30: if search-for == rid then // found what it was searching for 

31: search^for < 1, ssearch-for < 1 // stops searching 

32: execute ^ for c = 0{1) steps ignoring the received data 

33: else if search-for == —1 and rsearch-for == —1 then 
34: execute .4. for c = 0{1) steps 

35: end if 

36: else / / the interaction is not part of the virtual ring 

37: if search.for == —1 and rsearch.for == —1 and ps == rps then 
38: execute .4 for c = C(l) steps 

39: end if 
40: end if 



Lemma 6. (i) X assigns the ids {0, 1, . . . ,n — 1} in a finite number of steps, (ii) The id- assignment 
process ends with an interaction {u,v) of two agents u and v that both have the idn — 2. (Hi) This 
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is the last interaction that modifies some agent's id. (iv) When this interaction happens, u and v 
know n and all other agents know a population size that is strictly smaller than n. 

Proof, (i) Initially, all agents have the id 0. Each agent's id can only be incremented. Moreover, an 
id that has appeared in the population can never be completely eliminated (it is only incremented 
when sure that it also exists in another agent). As long as id n — 1 has not appeared, by the 
pigeonhole principle, there will be at least two agents with the same id. Thus, eventually (in a finite 
number of steps), due to fairness, two such agents will interact and one of them will increase its 
id by one. Clearly, the above process must end in a finite number of steps with an agent having id 
n — 1. When this happens, the agents are assigned the unique ids {0, 1, . . . , n — 1}. If not, then at 
least one id i < n — 1 is missing from the population. But i should have appeared because then 
n — 1 could not have been reached. But this is a contradiction, because once an id appears then it 
can never be completely eliminated. 

(ii) Assume not. Then it must end by some interaction between two agents u and v that both 
have the same \d i < n — 2. After the interaction, u has the \di + 1, v the id i, and the agents in 
general have the uids {0, 1, . . . , n— 1}. This implies that id i + 1 did not exist in the population just 
before this interaction. But for n — 1 to exist it must be the case that i + 1 < n — 1 had appeared 
at some point. But then it could have never been completely eliminated, which is a contradiction. 

(iii) Just after the unique consecutive ids {0, 1, . . . , n — 1} have been assigned, no agents have 
the same id. Ids are only modified when two agents with the same id interact. Thus, no agent will 
again change its id in all subsequent steps. 

(iv) u and v obviously know n after their interaction (that terminates the id-assignment process) , 
because n, that sets id = n—l, sets ps equal to id + 1, and v that keeps its id (that is, it still has 
id = n — 2), sets ps = id + 2. At the same time, for all other agents w eV — {u,v}, ii holds that 
their ps variables contain a value less than n, because, if not, then there should be an agent other 
than u with id n — 1 which is impossible (due to the correctness of the id-assignment process) . □ 

Lemma 7. After the last id-modification has taken place (via interaction {u,v)), all agents, one 
after the other, get informed of the correct population size. The propagation of the population size is 
done clockwise on the virtual ring n — 1, 0, 1, . . . , n — 2, n — 1. Whenever, after the unique consecutive 
ids have been correctly assigned, some agent i propagates the population size to agent i+1, i becomes 
reinitialized and cannot become reinitialized again in the future. 

Proof. During the last id-modification, u increases its id to n — 1 while, on the other hand, the 
responder v keeps its id to n — 2. Now, all agents have been assigned the correct unique ids 
{0, 1, . . . , n — 1} and, according to Lemma 6, no agent can again alter the value of its id variable. 
We can, thus, from now on call the agents by their ids. Agent n — 1 (which is agent u, with id 
n — 1) sets both variables search-far and ssearch-for to meaning that it may now only interact 
with agent 0; all other interactions that may happen until it meets agent 0, simply have no effect. 
Agent 77.-2 (that is, v) sets those variables to —2, that is, it is waiting for a specific interaction 
(which will be explained later on). Finally, both set ps and sps to the correct population size n, 
restore ^'s working blocks to the respective input strings (by executing working binput), and 
clear their output tapes (denoted by output ^ in the code). 

Moreover, from now on, an agent with id k other than n — 1 and n — 2 can only set ps to n if 
it interacts with agent k — 1 (if A; = 0, — 1 is defined to be n — 1) and if A: — 1 already knows that 
the population size is n. As we have already shown in Lemma 6, only agents n — 2 and n—1 know 
that the population size is n. All interactions between agent n — 2 and some other agent w have no 
effect, except for the case in which w's id is n — 3 and it has already obtained n. Thus, n — 2 cannot 
inform any agent of the population size and n cannot be propagated counterclockwise. Moreover, 
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agent n — 1 can only propagate n to agent 0, to 1, and so on, which imphes that the agents can 
only learn n via clockwise propagation. We next show that this is what eventually happens. 

Eventually, in a fair execution, agent n — 1 will interact with agent 0. When this happens, agent 
n — 1 has just found the agent that it was searching for, thus it sets search_for and ssearch-for to 
— 1 meaning that from now on it is not searching for any agent and executes A for c = 0{1) steps 
while ignoring any received data. The reason for executing A for a fixed number of steps will be 
explained in the sequel. What is of interest here, is that X now, in fact, has correctly reinitialized 
.A's execution on agent n — 1, as if the whole id-assignment process had never been executed. The 
reason is that A can now read the correct id and the correct population size, the working block 
simply contains the agent's input string, the output tape is empty, and all received data during the 
interaction have been ignored. Now, agent realizes that the other agent was searching for it (i.e. 
rsearch-for == id is true) so it resets itself (executes working ■<— binput and output 0) and, 
since rps > ps is true (because, as we have already shown, all agents except for n — 2 and n — 1 
still know a population size that is strictly smaller than n), it sets search_for and ssearch_for to 
1 (now searching for agent 1 to forward its knowledge). Finally, it sets ps and sps to the correct 
population size, received from agent's n — 1 message. It is easy to see that this process is continued 
until agent n — 2 interacts with agent n — 3 and the latter knows the correct population size. At this 
point, both set search_for and ssearch_for to —1 and both execute A for c = 0(1) steps while 
ignoring any received data, thus now all agents have been correctly reinitialized. Finally, it is easy 
to see that no agent may be reinitialized again in future steps. The reason is that ids won't change 
and, moreover, no agent will alter its search-for variable (all agents will forever keep it to — 1), 
thus, the code lines that reset .4's data cannot be executed again in the future. □ 

In the following Lemma, we call an interaction effective if protocol A is executed in at least one 
of the participating agents. 

Lemma 8. After the unique consecutive ids {0, 1, . . . , n — 1} have been assigned, agents that have 
reinitialized themselves can only have effective interactions with each other, that is, when they inter- 
act with each other A is executed, while, on the other hand, their interactions with non-reinitialized 
agents have no effect w.r.t. to A's execution. 

Proof. After the unique ids have been successfully assigned, it is like the population is parti- 
tioned in two non-communicating classes, the class R of reinitialized agents and N of the non- 
reinitialized ones. Initially (just after the unique ids have been successfully assigned), i? = and 
= {0, 1, . . . — 1}, that is, all agents are considered as non-reinitialized. An agent i 7^ n— 2 moves 
from A^ to i? iff it interacts with the next agent i -|- 1 on the virtual ring n— l,0,l,...,n — 2,n — 1 
and i already knows the correct population size n; the only agents that initially know the correct 
population size are n — 2 and n — 1. n — 3 and n — 2 will be the last agents to move from A^ to 
R as we have already shown in the proof of Lemma 7, and from that point on it will hold that 
i? = {0, 1, . . . , n — 1} and A^ = 0. Now, for any intermediate step, let i G R and j G A", where i / j 
and i, j G {0, 1, . . . ,n — 1} be the interacting agents. There are three cases: 

1. i = j -\- 1 (for j = n — 1, i is 0): Due to the clockwise propagation of the reinitializations this 
can only happen if z = n — 1 and j = n — 2. But n ~ 2 E N implies that n — 2 is still waiting 

(to interact with n — 3 which is still in A^), thus, this interaction has no effect. 

2. i = j — 1 (for j = 0, i is n — 1): i £ R implies that j already knows the correct population size. 
But since j G A^, j is still searching for j -|- 1 to propagate its knowledge, implying that this 
interaction has also no effect. 

3- ^ 7^ i + 1 and i 7^ j — 1: Assume that an effective interaction takes place. This implies (line 37 in 
Protocol 1) that both know the same population size and both have search-for = — 1. But i E R 



16 



loannis Chatzigiannakis, Othon Michail, Stavros Nikolaou, Andreas Pavlogiannis, and Paul G. Spirakis 



which imphes that they both know that the population size is n. Since j is non-reinitiahzed but 
knows the correct population size, either it is agent n — 2, in which case it has search_for = —2, 
or it has search-for = j + 1 / — 1 (because, due to the clockwise propagation of the population 
size, it has learned the correct population size from j — 1 but has not yet found j + 1 to propagate 
it). In both cases we have a contradiction because j should have search-for = — 1 according to 
our assumption. Thus, again here, no effective interaction can take place. 

Obviously, A is always executed when two agents in R interact, because they both have search_for = 
— 1 and know the same, correct, population size (to get convinced, inspect X's code). □ 

Lemma 9. No agent ever falls into some infinite loop. 

Proof. It is easy to see that I, except for calling A, only performs some variable assignments, which 
cannot lead into some infinite loop. But while the correct ids have not yet been assigned to the 
agents, some interacting agents may contain inconsistent data, which could make subroutine A fall 
into some infinite loop. By always executing A for a constant number of steps we guarantee that it 
won't. In fact, we guarantee that no agent can become busy for an infinite number of steps, because 
this would disable I's capability to reinitialize it, if needed. □ 

We can now conclude by combining the above lemmata. We have shown that B, by using I, 
correctly assigns the unique consecutive ids {0, 1, . . . , n — 1} to the agents (Lemma 6) and informs 
them of the correct population size (Lemma 7). Then each agent that propagates the population 
size, to the next one in the clockwise direction, becomes reinitialized, in the sense that it starts 
executing A from the beginning and cannot get reinitialized again in future steps (Lemma 7) . During 
this propagation process, B does not allow non-reinitialized agents, that possibly contain outdated 
information, to have some effective interaction with reinitialized agents (Lemma 8). Finally, due to 
the intermittent execution of A, no agent could have ever become busy for an infinite number of 
steps, thus, it is guaranteed that the reinitializations can always be applied (Lemma 9). Since A 
stably computes p, the same holds for B, that correctly simulates A, and the theorem follows. □ 

We now show that any symmetric predicate in SPACE{n log n) also belongs to IPLM. 

Theorem 4. SSPACE{nlogn) is a subset of IPLM. 

Proof Sketch. The IPALOMA model simulates a deterministic TM Ai of C'(nlogn) space. Initially 
the agents shift all the non-blank contents (input strings) to the left in the agent chain {0, 1, . . . , n — 
1}, until their collective memory looks like that of A4 (input symbols to the left and blank cells to 
the right in the chain). Then, agent starts simulating Ai and when it has no other memory to 
read to the right it passes A^'s control to agent 1, and so on. Whenever Ai accepts (or rejects), 
output 1 (0 resp.) is propagated to all agents. □ 

Proof. Let p : X ^ {0)1} be any predicate in SSPACE{nlogn) and A4 be the deterministic 
TM that decides p by using 0{nlogn) space. We construct an IPALOMA protocol A that stably 
computes p. Let x be any input assignment in X. Each agent receives its input string according 
to X (e.g. u receives string x{u)). The agents have the unique ids {0, 1, . . . , n — 1} and know the 
population size n. The agent that has the unique id starts simulating A4. 

If at some point the transition function of Ai moves the head to the right, but the agent's 
working memory has no other symbol to read (e.g. it reads U), then it writes 1 and A4^s current 
state to its message tape and becomes ready. When the unique agent with id 1 interacts with an 
agent that has 1 written in its message tape, it starts simulating Ai by putting the head over the 
first symbol in its working tape and assuming that the state of Ai is the state that it found written 
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on the message it received. Generally, whenever an agent with idO<i<n— 1 cannot continue 
simulating M to the right, it passes control to the agent with id i + 1. Additionally, if an agent 
with id < J < n — 1 that simulates Ai ever reaches its leftmost cell and the transition function 
of M. wants to move the head left, then it informs agent with id j — 1 to continue the simulation 
from its last non-blank cell (when they, eventually, interact). 

Note now, that at some point Ai may want to use its (initially) blank cells to write symbols. 
This is handled by A in the following manner. A first starts using the blank cells of the agent with 
id n — 1. If more are needed, it goes to agent 0, writes a separator to the first blank cell (naturally 
we can assume that the separator is already there from .A's initialization step, because also Ai uses 
separators, like ','s, between the different inputs of the symmetric predicate) and starts using those 
blank cells. Then it can use those of 1,2, .. . and so on until the last blank cell of agent with id 
n — 2. In fact, in this approach the distributed memory of M can be read by beginning from agent 
and reading all blocks (the parts of the working memories that are used for the simulation) before 
the separators until agent n — 2. Then we read the whole simulation block of agent n — 1, proceed 
with the simulation block after the separator of agent and continue with those blocks (after the 
separator) of all agents until agent with id n — 2. Thus, the memory is read in a cyclic fashion. 

Another approach would be, to initially transfer (shift) the concatenation of all agents inputs 
(separated by some symbol, e.g. ',') to agents 0, 1, 2, . . .. Now, the first k agents will contain input 
data, agent with id A; — 1 will probably also have some blank cells and the remaining agents will 
contain only blank cells. In this case, the simulation starts again from agent 0, but now M^s tape 
can be read sequentially from agent to agent n — 1. 

Whenever, during the simulation, Ai accepts, then A also accepts; that is, the agent that detects 
A^'s acceptance, writes 1 to its output tape and informs all agents to accept. If Ai rejects, it also 
rejects. Finally, note that A simulates Ai not necessarily on input x = (sq, Si, . . . , s„_i) but on 
some x' which is a permutation of x. The reason is that agent with id i does not necessarily obtain 
Si as its input. The crucial remark that completes the proof is that A4 accepts x if and only if it 
accepts x' , because p is symmetric. □ 

Theorem 5. SSPACE{nlogn) is a subset of PLM. 

Proof. Follows from SSPACE{nlogn) C I PLM = PLM. (Moreover, by Savitch's theorem [17], 
we have that SNSPACE{^/n\ogn) is a subset of PLM.) □ 

7 An Improved Lower Bound 

7.1 The PALOMA Model Simulates Community Protocols 

Here, we show that the PALOMA model simulates the Community Protocol model. This establishes 
that SNSPACE{n\ogn) is a lower bound for PLM, thus, improving that of Theorem 5. 

Definition 8. Let CP denote the class of all symmetric predicates that are stably computable by 
the community protocol model. 

It was shown in [15] that CP is equal to SNSPACE{n\ogn). 

Definition 9. Let RCP denote the class of all symmetric predicates that are stably computable by 
a restricted version of the community protocol model in which the agents can only have the unique 
ids {0, 1, . . . , n — 1}. 

We first show that the community protocol model that is restricted in the above fashion is 
equivalent to the community protocol model. 
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Lemma 10. RCP = CP. 

Proof. RCP C CP holds trivially. It remains to show that CP C RCP. Since the community 

protocol model can only perform comparisons on ids, it follows that if we replace any vector of 
unique ids {ido,idi, . . . indexed by agents, where ido < idi < . . . < idn-i, by the unique 

ids (0, 1, . . . , ra — 1) (thus preserving the ordering of the agents w.r.t. their ids) then the resulting 
computations in both cases must be identical. □ 

Lemma 11. RCP is a subset of IPLM. 

Proof. PALOMA protocols that already have the unique ids {0, 1, . . . , n — 1} and know the popula- 
tion size can do whatever community protocols that have the same unique ids can, and additionally 
can perform operations on ids (they can store them in the agents' memories and perform some 
internal computation on them). □ 

Since, according to Theorem 3, IPLM is equal to PLM, we have arrived to the following result. 

Theorem 6. CP is a subset of PLM. 

Proof Follows from CP = RCP C IPLM = PLM. □ 
Theorem 7. SNSPACEinlogn) is a subset of PLM. 

Proof. SNSPACE{n\ogn) is a subset of CP [15] and then we take into account Theorem 6. □ 

7.2 The PALOMA Model Directly Simulates a Nondeterministic TM of C>(n log n) 
Space 

Note that the proof of Theorem 7 depends on the following result of [18]: A Storage Modification 
Machine can simulate a Turing Machine. The reason is that [15] provided an indirect proof of the 
fact that SNSPACE{n\ogn) is a subset of CP. In particular, it was proven that Community 
Protocols can simulate a Storage Modification Machine and then the result of [18] was used to 
establish that Community Protocols can simulate a nondeterministic TM. Here, and in order to 
avoid this dependence, we generalize the ideas used in the proof of Theorem 3 and provide a direct 
simulation of a nondeterministic TM of O(nlogn) space by the PALOMA model, thus, providing 
an alternative proof for Theorem 7. 

Theorem 8. SN SPACE{n\ogn) is a subset of PLM. 

Proof. By considering Theorem 3, it suffices to show that SNSPACE{n log n) is a subset of IPLM. 
We have already shown that IPALOMA can simulate a deterministic TM M. of 0{n\ogn) space 
(Theorem 4). We now present some modifications that will allow us to simulate a nondetermin- 
istic TM N of the same memory size. Keep in mind that is a decider for some predicate in 
SNSPACE{nlogn), thus, it always halts. Upon initialization, each agent enters a reject state 
(writes to its output tape) and the simulation is carried out as in the case of M. 

Whenever a nondeterministic choice has to be made, the corresponding agent gets ready and 
waits for participating in an interaction. The id of the other participant will provide the nondeter- 
ministic choice to be made. One possible implementation of this idea is the following. Since there 
is a fixed upper bound on the number of nondeterministic choices (independent of the population 
size), the agents can store them in their memories. Any time a nondeterministic choice has to be 
made between k candidates the agent assigns the numbers 0, 1, . . . , A: — 1 to those candidates and 
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becomes ready for interaction. Assume that the next interaction is with an agent whose id is i. Then 
the nondeterministic choice selected by the agent is the one that has been assigned the number 
i mod k. Fairness guarantees that, in this manner, all possible paths in the tree representing AA's 
nondeterministic computation will eventually be followed. 

Any time the simulation reaches an accept state, all agents change their output to 1 and the 
simulation halts. Moreover, any time the simulation reaches a reject state, it is being re-initiated. 
The correctness of the above procedure is captured by the following two cases. 

1. If M rejects then every agent's output stabilizes to 0. Upon initialization, each agent's output 
is and can only change if M reaches an accept state. But all branches of AA's computation 
reject, thus, no accept state is ever reached, and every agent's output forever remains to 0. 

2. If M accepts then every agent's output stabilizes to 1. Since accepts, there is a sequence of 
configurations S, starting from the initial configuration C that leads to a configuration C' in 
which each agent's output is set to 1 (by simulating directly the branch of M that accepts). 
Notice that when an agent sets its output to 1 it never alters its output tape again, so it suffices 
to show that the simulation will eventually reach C . Assume on the contrary that it doesn't. 
Since J\f always halts the simulation will be at the initial configuration C infinitely many times. 
Due to fairness, by an easy induction on the configurations of S, C will also appear infinitely 
many times, which leads to a contradiction. Thus the simulation will eventually reach C' and 
the output will stabilize to 1. 

□ 

Note, also, that we have just provided an alternative way to prove Theorem 6. It is known [5, 

15] that a nondeterministic TM of space 0{n\ogn) can simulate the community protocol model. 
But, according to Theorem 8, the PALOMA model can simulate such a TM, thus, it can indirectly 
simulate the community protocol model. 

Simulating Nondeterministic Recognizers of 0{nlogn) Space 

Here, we generalize the preceding ideas to nondeterministic recognizers of 0{n\ogn) space. There 
is a way to stably compute predicates in SSPACE(nlogn) even when the corresponding TM A'' 
might loop, by carrying out an approach similar to the one given above. However, since neither an 
accept nor a reject state may be reached, the simulation is nondeterministically re-initiated at any 
point that is not in such a state. This choice is also obtained by the nondeterministic interactions. 
For example, whenever the agent that carries out the simulation interacts with an agent that has an 
id that is even, the simulation remains unchanged, otherwise it is re-initiated. Notice however that 
during the simulation, any agent having id i may need to interact with those having neighboring 
ids, so those must not be able to cause a re-initiation in the simulation. 

Correctness of the above procedure is captured by similar arguments to those in the proof of 
Theorem 8. If A/" never accepts, then no output tape will ever contain a 1, so the simulation stabilizes 
to 0. If A^ accepts there is a sequence of configurations S, starting from the initial configuration 
C that leads to a configuration C in which each agent's output is set to 1. Observe that this is a 
"good" sequence, meaning that no re-initiations take place, and, due to fairness, it will eventually 
occur. 

8 An Exact Characterization for PLM 

We first give an upper bound on PLM. 
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Theorem 9. All predicates in PLM are in the class NSPACE{n\ogn) 

Proof Sketch. The proof is similar to those that achieve the upper bounds of MPP [11] and Commu- 
nity Protocol [5]. In particular, it suffices to show that the language corresponding to any predicate 
stably computable by the PALOMA model can be decided by a nondeterministic TM of O{n\ogn) 
space. The TM guesses the next configuration and checks whether it has reached one that is output- 
stable. Note that O(nlogn) space suffices, because a population configuration consists of n agent 
configurations each of size O(logn). □ 

Proof. Let .4 be a PALOMA protocol that stably computes such a predicate p. A population 

configuration can be represented as an n— place vector storing an agent configuration per place, 
and thus uses 0{n\ogn) space in total. The language L derived from p is the set of such strings 
that, when each agent receives a single string element, p holds, that is, L = {(si, S2, . . . , Sn) | Si G 
X for all z G {1, . . . ,n} and p{si, S2,. . . , Sn) = !}• 

We will now present a nondeterministic Turing Machine that decides L in C'(nlogn) 

space. To accept the input (assignment) x, Aij, must verify two conditions: That there exists a 
configuration C reachable from the initial configuration corresponding to x in which the output 
tape of each agent indicates that p holds, and that there is no configuration C' reachable from C 
under which p is violated for some agent. 

The first condition is verified by guessing and checking a sequence of configTirations. Starting 
from the initial configuration, each time Ai_A guesses configuration Q+i and verifies that Cj yields 
Cj+i. This can be caused either by an agent transition u, or an encounter {u,v). In the first case, 
the verification can be carried out as follows: Ma guesses an agent u so that Cj and Cj+i differ 
in the configuration of u, and that Ci{u) yields CiJ^i{u). It then verifies that Ci and Cj+i differ 
in no other agent configurations. Similarly, in the second case Ma nondeterministically chooses 
agents v and verifies that encounter («, v) leads to C by ensuring that: (a) both agents have 
their working flags cleared in C, (b) the tape exchange takes place in C , (c) both agents update 
their states according to 7 and set their working flags to 1 in C' and (d) that Ci and Cj+i differ 
in no other agent conflgurations. In each case, the space needed is 0{n\ogn) for storing Q, Cj+i, 
plus Oilogn) extra capacity for ensuring the validity of each agent conflguration in Cj+i. 

If the above hold, M.a replaces Q with Q+i and repeats this step. Otherwise, M.A drops 
Cj+i. Any time a configuration C is reached in which p holds, M_a computes the complement of 
a similar reachability problem: it verifies that there exists no configuration reachable from C in 
which p is violated. Since N SPACE is closed under complement for all space functions > logn 
(see Immerman-Szelepcsenyi theorem, [16], pages 151 — 153), this condition can also be verified 
in 0{n\ogn) space. Thus, L can be decided in C?(nlogn) space by some nondeterministic Turing 
Machine, so L G N SPACE{n\ogn). □ 

Theorem 10. PLM is equal to SN SPACE{n\ogn). 

Proof. Follows from Theorems 7 (or, equivalently, Theorem 8), which establishes that SNSPACE{ 
nlogn) C PLM, and 9, which cstabfishes that PLM C N SPACE{n\ogn); but for aU p G PLM, 
p is symmetric, thus, PLM C SN SPACE{nlogn). □ 

9 Conclusions - Future Research Directions 

We proposed the PALOMA model, an extension of the PP model [2], in which the agents are 
communicating TMs of memory whose size is logarithmic in the population size. We focused on 
studying the computational power of the new model. Although the model preserves uniformity 
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and anonymity, interestingly, we have been able to prove that the agents can organize themselves 
into a nondeterministic TM that makes full use of the agents' total memory (i.e. of 0{nlogn) 
space). The agents are initially identical, but by executing an iterative reinitiation process they 
are able to assign unique consecutive ids to themselves and get informed of the population size. 
In this manner, we showed that PLM, which is the class of predicates stably computable by 
the PALOMA model, contains all symmetric predicates in NSPACE{nlogn). Finally, by upper 
bounding PLM, we concluded that it is precisely equal to the class consisting of all symmetric 
predicates in NSPACE{nlogn). 

Many interesting questions remain open. Is the PALOMA model fault-tolerant? What precon- 
ditions are needed in order to achieve satisfactory fault-tolerance? Is it possible for the PALOMA 
model to simulate the MPP model [11]? To prove the latter, it would suffice to show that NSPACE{ 
nlogn) is an upper bound for MP (the class of computable predicates by MPP). But we do not 
expect this to be easy, because it would require to prove that we can encode the C(n^) sized config- 
urations of MPP by new configurations of O (nlogn) size whose transition graph is, in some sense, 
isomorphic to the old one (e.g. the new configurations reach the same stable outputs). Finally, 
O(logn) memory per agent seems to behave as a threshold. Is there some sort of impossibility 
result showing that with 0{f{n)) memory, where /(n) is asymptotically smaller than logn, the 
class of stably computable predicates is strictly smaller than N SP AC E{nf [n))l At a first glance, 
it seems that the agents are unable to store uids and get informed of the population size. 
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